CVE-2016-3951

MEDIUM

Linux kernel <4.5 - Use After Free

Title source: llm

Description

Double free vulnerability in drivers/net/usb/cdc_ncm.c in the Linux kernel before 4.5 allows physically proximate attackers to cause a denial of service (system crash) or possibly have unspecified other impact by inserting a USB device with an invalid USB descriptor.

References (23)

... and 3 more

Scores

CVSS v3 4.6
EPSS 0.0004
EPSS Percentile 11.7%
Attack Vector PHYSICAL
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Classification

Status draft

Affected Products (15)

canonical/ubuntu_linux
canonical/ubuntu_linux
canonical/ubuntu_linux
novell/suse_linux_enterprise_software_development_kit
suse/suse_linux_enterprise_software_development_kit
novell/suse_linux_enterprise_desktop
novell/suse_linux_enterprise_desktop
novell/suse_linux_enterprise_live_patching
novell/suse_linux_enterprise_module_for_public_cloud
novell/suse_linux_enterprise_real_time_extension
novell/suse_linux_enterprise_server
novell/suse_linux_enterprise_server
novell/suse_linux_enterprise_workstation_extension
novell/suse_linux_enterprise_workstation_extension
linux/linux_kernel

Timeline

Published May 02, 2016
Tracked Since Feb 18, 2026